@ellipsis-dev/sdk 0.15.1 → 0.17.0

package/dist/{types-D9g-eZui.d.ts → types--VF0yCc1.d.ts}

@@ -14,16 +14,11 @@ interface paths {
         put?: never;
         /**
          * Create Agent Config
-         * @description Create an agent config.
+         * @description Create an agent config, managed through the API: no file, live
+         *     immediately. To put its definition in a repository instead, create
+         *     it here and then POST /v1/agents/configs/{config_id}/link.
          *
-         *     Name a repository and Ellipsis opens a pull request adding the
-         *     config file to agents/ there; the agent goes live when it
-         *     merges. Omit it and the agent is created here, with no file,
-         *     live immediately — and every file reference in it must name the
-         *     repository it lives in.
-         *
-         *     Accepts an inline config or a gallery template slug. 409 when
-         *     another live agent already holds the name.
+         *     409 when another live agent already holds the name.
          */
         post: operations['create_agent_config'];
         delete?: never;
@@ -418,6 +413,111 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/environments': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Environments
+         * @description List saved environments.
+         */
+        get: operations['list_environments'];
+        put?: never;
+        /**
+         * Create Environment
+         * @description Create an environment, managed through the API: no file, live
+         *     immediately. To define it in a repository instead, commit a
+         *     `kind: environment` YAML under an agents directory.
+         *
+         *     409 when another live environment already holds the name.
+         */
+        post: operations['create_environment'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/environments/defaults': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Environment Defaults
+         * @description Get the default environments.
+         *
+         *     The account-wide default and the per-repository defaults, as
+         *     environment ids. Repo rungs are keyed "owner/name".
+         */
+        get: operations['list_environment_defaults'];
+        /**
+         * Put Environment Default
+         * @description Set a default environment.
+         *
+         *     Addressed by rung: the account rung (repository omitted) or a
+         *     repository rung ("owner/name"); the environment by id or name.
+         *     Returns the full resulting ladder. Refused for sandbox tokens.
+         */
+        put: operations['put_environment_default'];
+        post?: never;
+        /**
+         * Delete Environment Default
+         * @description Clear a default environment.
+         *
+         *     Addressed by rung: the account rung (repository omitted) or a
+         *     repository rung. Refused for sandbox tokens.
+         */
+        delete: operations['delete_environment_default'];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/environments/{environment_id}': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Environment
+         * @description Return one saved environment, by id or by name.
+         */
+        get: operations['get_environment'];
+        /**
+         * Update Environment
+         * @description Replace an environment's definition, by id or by name.
+         *
+         *     The whole definition is replaced, live at once — future sessions
+         *     resolve the new body; running sessions keep the one frozen at
+         *     their start. Only for environments managed through this API: one
+         *     defined by a repository file is a 409.
+         */
+        put: operations['update_environment'];
+        post?: never;
+        /**
+         * Delete Environment
+         * @description Delete an environment, by id or by name.
+         *
+         *     Always succeeds, even while agents still reference it — their next
+         *     session start fails with a clear error naming the missing
+         *     environment. Past sessions remain readable. Only for environments
+         *     managed through this API — delete the file to remove one defined
+         *     by a repository.
+         */
+        delete: operations['delete_environment'];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/files': {
         parameters: {
             query?: never;
@@ -911,12 +1011,13 @@ interface paths {
          * Start Agent Session
          * @description Start a cloud agent session.
          *
-         *     Provide at most one of config_id (an id or an agent name),
-         *     config, or
-         *     template_id; with none, the account's default-config ladder
-         *     resolves the config. 400 when idle_start is combined with
-         *     prompt or input. 422 when the agent declares an
-         *     input schema and the request's input is absent or invalid.
+         *     Provide at most one of config_id (an id or an agent name) or
+         *     config; with neither, the account's default-config ladder
+         *     resolves the config. `prompt` is the first message; omit it and
+         *     the session starts idle, waiting for one. 400 when
+         *     interactive=false and there is no prompt or input. 422 when the
+         *     agent declares an input schema and the request's input is absent
+         *     or invalid.
          */
         post: operations['start_agent_session'];
         delete?: never;
@@ -1225,7 +1326,6 @@ interface components {
             /**
              * @default {
              *       "enabled": true,
-             *       "interactive": true,
              *       "metadata": {
              *         "annotations": {},
              *         "labels": []
@@ -1235,21 +1335,18 @@ interface components {
              */
             ellipsis: components['schemas']['AgentConfigEllipsis'];
             /**
+             * Environment
              * @default {
              *       "compute": {},
              *       "hooks": {},
              *       "image": {},
+             *       "mcp_servers": [],
              *       "repositories": [],
              *       "variables": []
              *     }
              */
-            environment: components['schemas']['AgentConfigEnvironment'];
+            environment: string | components['schemas']['AgentConfigEnvironment'];
             input?: components['schemas']['AgentConfigInput'] | null;
-            /**
-             * Mcp Servers
-             * @default []
-             */
-            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'])[];
             output?: components['schemas']['AgentConfigOutput'] | null;
             /**
              * @default {
@@ -1381,17 +1478,15 @@ interface components {
          * AgentConfigEllipsis
          * @description The Ellipsis product namespace for a config file: which schema this is
          *     (`version`), the human-facing identity (`name`/`description`), freeform
-         *     organizational `metadata`, whether the agent is `enabled`, and the
-         *     human-access flag `interactive`. The presence of a top-level `ellipsis:`
-         *     mapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary
-         *     YAML that merely lives under a config directory) — see
-         *     `yaml_is_ellipsis_config`.
+         *     organizational `metadata`, and whether the agent is `enabled`. The
+         *     presence of a top-level `ellipsis:` mapping is what marks a YAML file as
+         *     an Ellipsis agent config (vs arbitrary YAML that merely lives under a
+         *     config directory) — see `yaml_is_ellipsis_config`.
          *
-         *     `enabled`/`interactive` are agent behavior, not freeform metadata, so they
-         *     stay inside the config `sha` (only `metadata` is sha-excluded).
-         *     `interactive` lets a human `agent session connect` to a live session (CLI
-         *     relay). It does not decide whether a session is ephemeral or durable — that
-         *     is the trigger's job.
+         *     `enabled` is agent behavior, not freeform metadata, so it stays inside
+         *     the config `sha` (only `metadata` is sha-excluded). Whether a session
+         *     accepts messages is a per-run choice (POST /v1/sessions `interactive`),
+         *     not a config one.
          */
         AgentConfigEllipsis: {
             /** Description */
@@ -1401,11 +1496,6 @@ interface components {
              * @default true
              */
             enabled: boolean;
-            /**
-             * Interactive
-             * @default true
-             */
-            interactive: boolean;
             /**
              * @default {
              *       "annotations": {},
@@ -1453,6 +1543,11 @@ interface components {
             hooks: components['schemas']['AgentConfigEnvironmentHooks'];
             /** @default {} */
             image: components['schemas']['AgentConfigEnvironmentImage'];
+            /**
+             * Mcp Servers
+             * @default []
+             */
+            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'] | components['schemas']['AgentConfigMcpStdioServer'] | components['schemas']['AgentConfigMcpRemoteServer'])[];
             /**
              * Repositories
              * @default []
@@ -1578,19 +1673,69 @@ interface components {
             /** Message */
             message?: string | null;
         };
+        /**
+         * AgentConfigMcpRemoteServer
+         * @description A bring-your-own remote MCP server: the harness talks HTTP to `url`.
+         *     Nothing runs in the sandbox image. `headers` carry static auth (e.g.
+         *     `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
+         *     references, resolved at run time from the account's secrets store.
+         */
+        AgentConfigMcpRemoteServer: {
+            /**
+             * Headers
+             * @default {}
+             */
+            headers: {
+                [key: string]: string;
+            };
+            /** Name */
+            name: string;
+            /** Url */
+            url: string;
+        };
         /**
          * AgentConfigMcpServer
          * @description One built-in MCP server this agent opts into by name (`linear`/`slack`).
-         *     This is a name reference over the connected built-in set, NOT a custom-server
-         *     definition — there is no command/url/headers shape (that was the old,
-         *     removed field, and Ellipsis does not support bring-your-own MCP servers).
-         *     It only matters when the named integration is set to `opt_in` inclusion; an
-         *     integration in the default `all_sessions` mode is added regardless.
+         *     A name reference over the connected built-in set — the platform manages the
+         *     server's transport and credentials. It only matters when the named
+         *     integration is set to `opt_in` inclusion; an integration in the default
+         *     `all_sessions` mode is added regardless. For a server the platform does not
+         *     provide, define it instead (`AgentConfigMcpStdioServer` /
+         *     `AgentConfigMcpRemoteServer`).
          */
         AgentConfigMcpServer: {
             /** Name */
             name: string;
         };
+        /**
+         * AgentConfigMcpStdioServer
+         * @description A bring-your-own stdio MCP server: the harness spawns `command` inside
+         *     the sandbox and speaks JSON-RPC over its stdin/stdout. The command must be
+         *     runnable in the sandbox image — install its runtime via `image.setup` /
+         *     `image.dockerfile_append` if the base image lacks it.
+         *
+         *     `env` values may embed `${NAME}` references, resolved at run time from the
+         *     account's secrets store (see `mcp_secret_refs`); everything else is passed
+         *     literally.
+         */
+        AgentConfigMcpStdioServer: {
+            /**
+             * Args
+             * @default []
+             */
+            args: string[];
+            /** Command */
+            command: string;
+            /**
+             * Env
+             * @default {}
+             */
+            env: {
+                [key: string]: string;
+            };
+            /** Name */
+            name: string;
+        };
         /**
          * AgentConfigMemorySize
          * @description A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).
@@ -2874,46 +3019,19 @@ interface components {
         };
         /**
          * CreateAgentConfigRequest
-         * @description Parameters for creating an agent config. Exactly one of config or
-         *     template_id must be set.
+         * @description Parameters for creating an agent config.
          */
         CreateAgentConfigRequest: {
-            /** @description An inline agent config. */
-            config?: components['schemas']['AgentConfig'] | null;
-            /**
-             * Path
-             * @description File path within the repo, when a repository is named. Omit for the default agents/<slug>.yaml; if set it must be a location the config sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).
-             */
-            path?: string | null;
-            /**
-             * Repository
-             * @description Define the agent as a file in this repository: Ellipsis opens a pull request adding it, and the agent goes live when that merges. Repository name within the caller's account; the owner is always the account, so pass a bare name (e.g. "my-service"), not "owner/my-service". Omit to create the agent through the API alone, with no file and live immediately.
-             */
-            repository?: string | null;
-            /**
-             * Template Id
-             * @description A gallery template slug (see GET /v1/agents/templates).
-             */
-            template_id?: string | null;
+            /** @description The agent's definition. */
+            config: components['schemas']['AgentConfig'];
         };
         /**
-         * CreateAgentConfigResponse
-         * @description The created agent config, plus the pull request that adds its file when
-         *     one was opened.
+         * CreateEnvironmentRequest
+         * @description Parameters for creating an environment.
          */
-        CreateAgentConfigResponse: {
-            /** @description The created agent config. */
-            config: components['schemas']['Config'];
-            /**
-             * Path
-             * @description The file path the config was written to, or null when the agent has no file.
-             */
-            path?: string | null;
-            /**
-             * Pull Request Url
-             * @description The pull request that adds the config file. The agent becomes live once it merges and syncs. Null when no repository was named: the agent is already live.
-             */
-            pull_request_url?: string | null;
+        CreateEnvironmentRequest: {
+            /** @description The environment's definition. */
+            environment: components['schemas']['EnvironmentConfig'];
         };
         /**
          * CreateFileRequest
@@ -3079,6 +3197,168 @@ interface components {
             /** Match */
             match?: string[] | null;
         };
+        /**
+         * Environment
+         * @description A saved environment: the machine agents run in (repositories,
+         *     variables, MCP servers, image, compute, hooks), defined once and
+         *     referenced by name or id from agent configs and session starts.
+         */
+        Environment: {
+            /**
+             * Created At
+             * Format: date-time
+             * @description When the environment was created.
+             */
+            created_at: string;
+            /** @description The GitHub account that last edited the environment, when known. */
+            edited_by?: components['schemas']['GithubAccountSnippet'] | null;
+            /** @description The environment definition itself, as parsed from its YAML. */
+            environment: components['schemas']['EnvironmentConfig'];
+            /**
+             * Id
+             * @description Unique identifier of the environment.
+             */
+            id: string;
+            /**
+             * Last Sync Error
+             * @description The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means sessions run the last good definition, not the YAML currently on the branch.
+             */
+            last_sync_error?: string | null;
+            /**
+             * Last Synced Commit Sha
+             * @description The last commit the environment was synced from.
+             */
+            last_synced_commit_sha?: string | null;
+            /** @description "github" environments are defined by a file in a repository and are changed by editing that file; "api" environments have no file and are changed through this API. */
+            managed_by: components['schemas']['ConfigManagedBy'];
+            /**
+             * Name
+             * @description The environment's customer-unique addressable name; usable anywhere an environment is referenced, interchangeably with the id.
+             */
+            name: string;
+            /**
+             * Sha
+             * @description The environment's content identity fingerprint.
+             */
+            sha: string;
+            /** @description The repository, path, and branch the environment syncs from. Null for environments managed through the API. */
+            source_details?: components['schemas']['AgentConfigSourceGithub'] | null;
+            /**
+             * Updated At
+             * Format: date-time
+             * @description When the environment was last updated.
+             */
+            updated_at: string;
+        };
+        /**
+         * EnvironmentConfig
+         * @description A parsed environment document: identity plus the environment body.
+         *
+         *     The body fields are flattened to the top level of the file (not nested
+         *     under an `environment:` key) — the file *is* the environment, so nesting
+         *     would be ceremony. `to_environment()` projects the body for substitution
+         *     into an agent config.
+         */
+        EnvironmentConfig: {
+            /** @default {} */
+            compute: components['schemas']['AgentConfigCompute'];
+            ellipsis: components['schemas']['EnvironmentConfigEllipsis'];
+            /** @default {} */
+            hooks: components['schemas']['AgentConfigEnvironmentHooks'];
+            /** @default {} */
+            image: components['schemas']['AgentConfigEnvironmentImage'];
+            /**
+             * Mcp Servers
+             * @default []
+             */
+            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'] | components['schemas']['AgentConfigMcpStdioServer'] | components['schemas']['AgentConfigMcpRemoteServer'])[];
+            /**
+             * Repositories
+             * @default []
+             */
+            repositories: components['schemas']['AgentConfigRepository'][];
+            /**
+             * Variables
+             * @default []
+             */
+            variables: components['schemas']['AgentConfigEnvironmentVariable'][];
+        };
+        /**
+         * EnvironmentConfigEllipsis
+         * @description The Ellipsis namespace of an environment file. `kind: environment` is
+         *     what routes a synced YAML here instead of to the agent-config parser —
+         *     an agent config carries no `kind` (or `kind: agent`, tolerated nowhere:
+         *     absence is the agent marker).
+         */
+        EnvironmentConfigEllipsis: {
+            /** Description */
+            description?: string | null;
+            /**
+             * Kind
+             * @constant
+             */
+            kind: 'environment';
+            /**
+             * @default {
+             *       "annotations": {},
+             *       "labels": []
+             *     }
+             */
+            metadata: components['schemas']['AgentConfigMetadata'];
+            /** Name */
+            name?: string | null;
+        };
+        /**
+         * EnvironmentDefaults
+         * @description Which environment serves sessions whose config carries no environment
+         *     of its own: one account-wide rung, plus a rung per repository. Values are
+         *     environment ids — stable across renames, unlike names.
+         */
+        EnvironmentDefaults: {
+            /**
+             * Account
+             * @description Environment id serving sessions with no repository context, or null when no account default is set.
+             */
+            account?: string | null;
+            /**
+             * Repositories
+             * @description Environment id per repository, keyed "owner/name". A repository with no default set is absent.
+             * @default {}
+             */
+            repositories: {
+                [key: string]: string;
+            };
+        };
+        /**
+         * EnvironmentResponse
+         * @description One saved environment.
+         */
+        EnvironmentResponse: {
+            /** @description The saved environment. */
+            environment: components['schemas']['Environment'];
+        };
+        /**
+         * EnvironmentSource
+         * @description How a session's environment was chosen. None (the field is nullable)
+         *     when the config carried an inline environment block and no resolution ran —
+         *     an inline environment is not a reference, so there is nothing to record.
+         *
+         *     Not derivable from the row: `environment_id` says WHICH environment, not
+         *     how it was chosen, and is null for the built-in basic sandbox.
+         * @enum {string}
+         */
+        EnvironmentSource: 'request' | 'agent_config' | 'repo_default' | 'account_default' | 'platform_default';
+        /**
+         * EnvironmentsListResponse
+         * @description The caller's saved environments.
+         */
+        EnvironmentsListResponse: {
+            /**
+             * Environments
+             * @description Saved environments.
+             */
+            environments: components['schemas']['Environment'][];
+        };
         /** ErrorInfo */
         ErrorInfo: {
             /**
@@ -4417,6 +4697,23 @@ interface components {
              */
             repository?: string | null;
         };
+        /**
+         * PutEnvironmentDefaultRequest
+         * @description Parameters for setting a default environment, at either the account or
+         *     the repository level.
+         */
+        PutEnvironmentDefaultRequest: {
+            /**
+             * Environment
+             * @description The environment to make the default: an environment id, or its customer-unique name.
+             */
+            environment: string;
+            /**
+             * Repository
+             * @description The rung to set: "owner/name" for a repo default; omit to set the account default. An unknown or foreign repo is a 404.
+             */
+            repository?: string | null;
+        };
         /**
          * PutSecretsRequest
          * @description Store secrets for the account's sandboxes. Each secret is upserted by
@@ -4625,16 +4922,13 @@ interface components {
              * @description The session execution that produced the record, or null for session-scoped lifecycle records.
              */
             execution_id?: string | null;
+            /** @description What the session did to git, per repository, so a result row can show what it shipped without fetching the session. */
+            git?: components['schemas']['SessionGit'] | null;
             /**
              * Id
              * @description The matching record's unique identifier.
              */
             id: string;
-            /**
-             * Output Prs
-             * @description Pull requests the session created, so a result row can show what it shipped without fetching the session.
-             */
-            output_prs?: components['schemas']['SessionPr'][] | null;
             /**
              * Record Type
              * @description The record's event type.
@@ -4680,17 +4974,12 @@ interface components {
              */
             config_id?: string | null;
             /**
-             * Config Override
-             * @description Optional partial-config override merged onto the chosen config and re-validated — e.g. {"claude": {"model": "claude-opus-4-8"}} to replay the run on a different model, or {"budget": {"session": 5.0}} to raise its budget. Mutually exclusive with config_override_yaml.
+             * Override
+             * @description Optional partial patch on the replayed config, applied last — e.g. {"claude": {"model": "claude-opus-4-8"}} to replay the run on a different model, or {"budget": {"session": 5.0}} to raise its budget.
              */
-            config_override?: {
+            override?: {
                 [key: string]: unknown;
             } | null;
-            /**
-             * Config Override Yaml
-             * @description The same partial-config override as a YAML/JSON string (e.g. read from a file). Mutually exclusive with config_override.
-             */
-            config_override_yaml?: string | null;
             /**
              * Prompt
              * @description Per-run instructions. Omit to inherit the original run's prompt (a bare replay re-runs the same instructions); pass "" to clear it.
@@ -4752,7 +5041,7 @@ interface components {
          *     routes; nothing maps to it yet.
          * @enum {string}
          */
-        Resource: 'account' | 'alerts' | 'sessions' | 'files' | 'memories' | 'reviews' | 'configs' | 'defaults' | 'secrets' | 'templates' | 'integrations' | 'tokens';
+        Resource: 'account' | 'alerts' | 'sessions' | 'files' | 'memories' | 'reviews' | 'configs' | 'defaults' | 'environments' | 'secrets' | 'templates' | 'integrations' | 'tokens';
         /**
          * Review
          * @description One code review: one pipeline iteration over one commit range of a pull
@@ -5975,8 +6264,12 @@ interface components {
              * @description When the session was created.
              */
             created_at: string;
+            /** @description The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment. */
+            environment?: components['schemas']['SessionEnvironment'];
             /** @description How the session ended; null until it is terminal. */
             exit_status?: components['schemas']['SessionExitStatus'] | null;
+            /** @description What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured. */
+            git?: components['schemas']['SessionGit'] | null;
             /** @description The coding-agent harness the session runs on. */
             harness: components['schemas']['Harness'];
             /**
@@ -6002,13 +6295,6 @@ interface components {
             metadata: {
                 [key: string]: string;
             };
-            /** @description Per-file line counts for the uncommitted changes in the session's workspace. Work the session committed is not included here — see output_prs. Null if no diff was ever captured. */
-            output_diff?: components['schemas']['SessionDiff'] | null;
-            /**
-             * Output Prs
-             * @description Pull requests the session created or updated.
-             */
-            output_prs?: components['schemas']['SessionPr'][] | null;
             /** @description What preceded this session, if anything. */
             parent?: components['schemas']['SessionParent'];
             /**
@@ -6148,35 +6434,20 @@ interface components {
             total: number;
         };
         /**
-         * SessionDiff
-         * @description The counts half of a session's working-tree diff, small enough to ride on
-         *     agent_sessions and be returned by every session read. The patch text lives
-         *     in `agent_session_diffs` and is fetched on demand.
-         *
-         *     Scope is UNCOMMITTED work only (`git diff HEAD`), so this answers "is there
-         *     unlanded work in this sandbox?" — a session that committed and pushed shows
-         *     no files here and its created PR instead.
-         */
-        SessionDiff: {
-            /** Files */
-            files: components['schemas']['SessionDiffFile'][];
-        };
-        /**
-         * SessionDiffFile
-         * @description One file's uncommitted change in a session's sandbox, as `git diff HEAD`
-         *     --numstat reports it (with intent-to-add so new files count).
+         * SessionEnvironment
+         * @description The environment this session resolved: which saved environment (as it
+         *     exists now) and how it was chosen. The environment's frozen BODY rides
+         *     inside `agent.config.environment` — substitution happens before the config
+         *     snapshot freezes — so this object is provenance, not payload.
          */
-        SessionDiffFile: {
-            /** Additions */
-            additions: number;
-            /** Deletions */
-            deletions: number;
-            /** Path */
-            path: string;
-            /** Repo */
-            repo: string;
-            /** Status */
-            status: string;
+        SessionEnvironment: {
+            /**
+             * Environment Id
+             * @description Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.
+             */
+            environment_id?: string | null;
+            /** @description How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment. */
+            source?: components['schemas']['EnvironmentSource'] | null;
         };
         /**
          * SessionExecution
@@ -6266,6 +6537,75 @@ interface components {
          * @enum {string}
          */
         SessionExitStatus: 'completed' | 'budget_hit' | 'payment_required' | 'tool_call_failed' | 'lifecycle_hook_failed' | 'missing_repo_access' | 'missing_token_permissions' | 'missing_sandbox_variables' | 'blocked' | 'contact_email_required' | 'cancelled' | 'interrupted' | 'error' | 'stopped';
+        /**
+         * SessionGit
+         * @description Every repo the session touched. Small enough to ride on `agent_sessions`
+         *     and be returned by every session read.
+         */
+        SessionGit: {
+            /**
+             * Repos
+             * @default []
+             */
+            repos: components['schemas']['SessionGitRepo'][];
+        };
+        /**
+         * SessionGitFile
+         * @description One file's uncommitted change, as `git diff HEAD --numstat` reports it
+         *     (with intent-to-add, so a brand-new file still counts).
+         */
+        SessionGitFile: {
+            /** Additions */
+            additions: number;
+            /** Deletions */
+            deletions: number;
+            /** Path */
+            path: string;
+            /** Status */
+            status: string;
+        };
+        /**
+         * SessionGitPr
+         * @description A pull request the session opened in this repo, denormalized at capture
+         *     time so a surface renders a labeled link without joining gh_prs. Live PR
+         *     state (open/merged/closed) is not stored — read gh_prs where a view needs
+         *     it. The repo is the parent object, so it is not repeated here.
+         */
+        SessionGitPr: {
+            /** Gh Pr Id */
+            gh_pr_id?: number | null;
+            /** Number */
+            number: number;
+            /** Title */
+            title?: string | null;
+            /** Url */
+            url: string;
+        };
+        /**
+         * SessionGitRepo
+         * @description One checkout in the session's sandbox and everything the session did to
+         *     it, split by whether it survived the sandbox.
+         */
+        SessionGitRepo: {
+            /** Full Name */
+            full_name: string;
+            /** Local Commit */
+            local_commit?: string | null;
+            /**
+             * Local Uncommitted Files
+             * @default []
+             */
+            local_uncommitted_files: components['schemas']['SessionGitFile'][];
+            /**
+             * Prs
+             * @default []
+             */
+            prs: components['schemas']['SessionGitPr'][];
+            /** Remote Branch */
+            remote_branch?: string | null;
+            /** Remote Commit */
+            remote_commit?: string | null;
+        };
         /**
          * SessionLiveness
          * @description The durable conversation axis (backs the surfaced `session` field).
@@ -6400,25 +6740,6 @@ interface components {
              */
             session_id?: string | null;
         };
-        /**
-         * SessionPr
-         * @description A pull request this session created, denormalized at capture time so
-         *     session surfaces render a labeled link without joining gh_prs. Live PR
-         *     state (open/merged/closed) is not stored here — read it from gh_prs where
-         *     a view needs it.
-         */
-        SessionPr: {
-            /** Gh Pr Id */
-            gh_pr_id?: number | null;
-            /** Number */
-            number: number;
-            /** Repo Full Name */
-            repo_full_name: string;
-            /** Title */
-            title?: string | null;
-            /** Url */
-            url: string;
-        };
         /**
          * SessionPrompting
          * @description The prompt-affordance projection. `enabled` answers "would a send work",
@@ -6801,7 +7122,7 @@ interface components {
          * @description Parameters for starting a new agent session.
          */
         StartAgentSessionRequest: {
-            /** @description An inline agent config to run under. */
+            /** @description An inline agent config to run under. At most one of config_id or config may be set; if neither is, the run resolves the account's default-config ladder (repo default, then account default, then the platform default config). */
             config?: components['schemas']['AgentConfig'] | null;
             /**
              * Config Id
@@ -6809,29 +7130,16 @@ interface components {
              */
             config_id?: string | null;
             /**
-             * Config Override
-             * @description Optional partial-config override merged onto the chosen config and re-validated (e.g. {"budget": {"session": 5.0}} to raise just this session's budget). Merged onto config_id/template_id or the platform default; with an inline config, set fields directly instead. Mutually exclusive with config_override_yaml.
-             */
-            config_override?: {
-                [key: string]: unknown;
-            } | null;
-            /**
-             * Config Override Yaml
-             * @description The same partial-config override as a YAML/JSON string (e.g. read from a file). Mutually exclusive with config_override.
+             * Environment
+             * @description The environment to run in: a saved environment's id (`env_...`) or its customer-unique name. Only for sessions with no explicit config (the agent config decides its own environment; 400 when combined with config/config_id). Omitted, the default-environment ladder resolves: repo default, then account default, then the built-in basic sandbox.
              */
-            config_override_yaml?: string | null;
+            environment?: string | null;
             /**
              * Force Rebuild
              * @description Skip the image cache for this session's initial provision: a fresh full build whose snapshot then refreshes the cache for later runs. A wake of a durable session provisions through the cache as usual. The CLI's `--rebuild`.
              * @default false
              */
             force_rebuild: boolean;
-            /**
-             * Idle Start
-             * @description Start the session with no initial message: the sandbox spins up, the agent starts idle at the prompt, and the first message sent to the session opens turn 0. Mutually exclusive with prompt. Ignored when the resolved config is not interactive (an ephemeral run keeps its kickoff — it can never receive a message).
-             * @default false
-             */
-            idle_start: boolean;
             /**
              * Input
              * @description The typed payload for an agent that declares input.json_schema: validated against the effective config's schema (422 on mismatch), rendered into the session's initial message (the agent's input.message template, or a JSON block). Required when the agent declares a schema; rejected when it does not.
@@ -6839,6 +7147,12 @@ interface components {
             input?: {
                 [key: string]: unknown;
             } | null;
+            /**
+             * Interactive
+             * @description Whether the session stays open for messages after its first turn. Set false for a one-shot run that does its job and closes without holding a warm sandbox; a one-shot run must carry a prompt (or input), since nothing can ever be sent to it later. Agents on the Codex harness are one-shot regardless.
+             * @default true
+             */
+            interactive: boolean;
             /**
              * Metadata
              * @description Arbitrary string key/value metadata stored on the session.
@@ -6847,9 +7161,16 @@ interface components {
             metadata: {
                 [key: string]: string;
             };
+            /**
+             * Override
+             * @description Optional partial patch on the RESOLVED session config, applied last — after the config and environment are chosen and the environment is substituted in. Nested objects merge key by key; scalars and arrays replace. E.g. {"environment": {"compute": {"memory": "16GB"}}} for just this session, or {"claude": {"model": "claude-opus-4-8"}}. It cannot swap in a different saved environment (it patches the resolved document; it never re-runs resolution).
+             */
+            override?: {
+                [key: string]: unknown;
+            } | null;
             /**
              * Prompt
-             * @description Per-run instructions appended to the initial query after the config's shared system prompt. Applies regardless of which config source is used.
+             * @description The session's first message. Omit it and the session starts idle: the sandbox spins up, the agent waits at the prompt, and the first message you send opens turn 0.
              */
             prompt?: string | null;
             /**
@@ -6857,11 +7178,6 @@ interface components {
              * @description The "owner/name" repository the client is standing in (the CLI's detected git remote). Selects the repo rung of the defaults ladder, and is merged into the sandbox repository set (cloned at its default branch) regardless of which config source is used. An unknown or foreign repo is ignored.
              */
             repository?: string | null;
-            /**
-             * Template Id
-             * @description A maintained run-on-demand template slug (e.g. "ellipsis-helper"), resolved server-side to its config. At most one of config_id, config, or template_id may be set; if none is, the run resolves the account's default-config ladder (repo default, then account default, then the platform default config).
-             */
-            template_id?: string | null;
         };
         /**
          * StartCliAuthResponse
@@ -6964,6 +7280,14 @@ interface components {
             /** @description The agent's new definition. Replaces the previous one wholesale — this is not a partial update. */
             config: components['schemas']['AgentConfig'];
         };
+        /**
+         * UpdateEnvironmentRequest
+         * @description A replacement definition for an environment managed through the API.
+         */
+        UpdateEnvironmentRequest: {
+            /** @description The environment's new definition. Replaces the previous one wholesale — this is not a partial update. */
+            environment: components['schemas']['EnvironmentConfig'];
+        };
         /**
          * UsageDailyPoint
          * @description One day's usage: tokens split by type, and cost split into the four
@@ -7151,15 +7475,15 @@ interface operations {
         };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['CreateAgentConfigResponse'];
+                    'application/json': components['schemas']['AgentConfigResponse'];
                 };
             };
-            /** @description Provide exactly one of config or template_id; or the config, path, or target branch is invalid. */
+            /** @description The config is invalid. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -7186,16 +7510,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The template or repository was not found in your account. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description An agent with that name already exists, another agent is already synced from that path, or a file already exists there. */
+            /** @description An agent with that name already exists. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -7957,8 +8272,475 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such alert in your account. */
-            404: {
+            /** @description No such alert in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    dismiss_alert: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                alert_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['AlertResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description No such alert in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The alert is not open. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    get_analytics_metrics: {
+        parameters: {
+            query?: {
+                days?: number | null;
+                start?: string | null;
+                end?: string | null;
+                /** @description Filter to repositories by "owner/name". */
+                repo?: string[] | null;
+                /** @description Filter by PR-author login(s). */
+                author?: string[] | null;
+                account_type?: string;
+                /** @description Filter by parent-PR status (open|draft|merged|closed). */
+                status?: string[] | null;
+            };
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['GetAnalyticsMetricsResponse'];
+                };
+            };
+            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    get_analytics_pull_requests: {
+        parameters: {
+            query?: {
+                days?: number | null;
+                start?: string | null;
+                end?: string | null;
+                account_type?: string[] | null;
+                repository_id?: number[] | null;
+                author_id?: number[] | null;
+                status?: string[] | null;
+            };
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['GetAnalyticsPullRequestsResponse'];
+                };
+            };
+            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    get_analytics_reviews: {
+        parameters: {
+            query?: {
+                days?: number | null;
+                start?: string | null;
+                end?: string | null;
+                repo?: string[] | null;
+                /** @description Filter by reviewer login(s). */
+                author?: string[] | null;
+                account_type?: string;
+                review_state?: string[] | null;
+            };
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['GetAnalyticsReviewsResponse'];
+                };
+            };
+            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    cli_auth_poll: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['CliAuthPollRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['PollCliAuthResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Unknown device code. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    cli_auth_start: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['StartCliAuthResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+        };
+    };
+    get_budget: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['BudgetSummary'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    list_environments: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['EnvironmentsListResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -7977,30 +8759,32 @@ interface operations {
             };
         };
     };
-    dismiss_alert: {
+    create_environment: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path: {
-                alert_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['CreateEnvironmentRequest'];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AlertResponse'];
+                    'application/json': components['schemas']['EnvironmentResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description The environment is invalid. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8008,8 +8792,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8017,8 +8801,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such alert in your account. */
-            404: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8026,7 +8810,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The alert is not open. */
+            /** @description An environment with that name already exists. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -8035,31 +8819,20 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description Validation Error */
+            /** @description The environment's name is missing or malformed. */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
         };
     };
-    get_analytics_metrics: {
+    list_environment_defaults: {
         parameters: {
-            query?: {
-                days?: number | null;
-                start?: string | null;
-                end?: string | null;
-                /** @description Filter to repositories by "owner/name". */
-                repo?: string[] | null;
-                /** @description Filter by PR-author login(s). */
-                author?: string[] | null;
-                account_type?: string;
-                /** @description Filter by parent-PR status (open|draft|merged|closed). */
-                status?: string[] | null;
-            };
+            query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
@@ -8074,16 +8847,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['GetAnalyticsMetricsResponse'];
-                };
-            };
-            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
+                    'application/json': components['schemas']['EnvironmentDefaults'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -8115,24 +8879,20 @@ interface operations {
             };
         };
     };
-    get_analytics_pull_requests: {
+    put_environment_default: {
         parameters: {
-            query?: {
-                days?: number | null;
-                start?: string | null;
-                end?: string | null;
-                account_type?: string[] | null;
-                repository_id?: number[] | null;
-                author_id?: number[] | null;
-                status?: string[] | null;
-            };
+            query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['PutEnvironmentDefaultRequest'];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -8140,11 +8900,11 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['GetAnalyticsPullRequestsResponse'];
+                    'application/json': components['schemas']['EnvironmentDefaults'];
                 };
             };
-            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
-            400: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8152,8 +8912,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8161,8 +8921,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description The environment or repository was not found in your account. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8181,17 +8941,11 @@ interface operations {
             };
         };
     };
-    get_analytics_reviews: {
+    delete_environment_default: {
         parameters: {
             query?: {
-                days?: number | null;
-                start?: string | null;
-                end?: string | null;
-                repo?: string[] | null;
-                /** @description Filter by reviewer login(s). */
-                author?: string[] | null;
-                account_type?: string;
-                review_state?: string[] | null;
+                /** @description Repo rung to clear ("owner/name"); omit to clear the account default. */
+                repository?: string | null;
             };
             header?: {
                 'user-agent'?: string | null;
@@ -8202,16 +8956,14 @@ interface operations {
         requestBody?: never;
         responses: {
             /** @description Successful Response */
-            200: {
+            204: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    'application/json': components['schemas']['GetAnalyticsReviewsResponse'];
-                };
+                content?: never;
             };
-            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
-            400: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8219,8 +8971,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8228,8 +8980,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description No default is set at that rung, or the repository was not found in your account. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8248,18 +9000,18 @@ interface operations {
             };
         };
     };
-    cli_auth_poll: {
+    get_environment: {
         parameters: {
             query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                'application/json': components['schemas']['CliAuthPollRequest'];
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                environment_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -8267,7 +9019,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['PollCliAuthResponse'];
+                    'application/json': components['schemas']['EnvironmentResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -8288,7 +9040,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description Unknown device code. */
+            /** @description No such environment in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -8308,22 +9060,39 @@ interface operations {
             };
         };
     };
-    cli_auth_start: {
+    update_environment: {
         parameters: {
             query?: never;
-            header?: never;
-            path?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                environment_id: string;
+            };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['UpdateEnvironmentRequest'];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['StartCliAuthResponse'];
+                    'application/json': components['schemas']['EnvironmentResponse'];
+                };
+            };
+            /** @description The environment is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -8344,27 +9113,54 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
+            /** @description No such environment in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The environment is defined by a file in a repository, or another live environment already holds the new name. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The environment's name is missing or malformed. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
         };
     };
-    get_budget: {
+    delete_environment: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path?: never;
+            path: {
+                environment_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
             /** @description Successful Response */
-            200: {
+            204: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    'application/json': components['schemas']['BudgetSummary'];
-                };
+                content?: never;
             };
             /** @description The bearer token is missing, invalid, or revoked. */
             401: {
@@ -8384,6 +9180,24 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
+            /** @description No such environment in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The environment is defined by a file in a repository; delete that file instead. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
             /** @description Validation Error */
             422: {
                 headers: {
@@ -9884,7 +10698,7 @@ interface operations {
                     'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The request combines incompatible fields (multiple config sources, idle_start with prompt/input, or both override forms), or the config override is invalid. */
+            /** @description The request combines incompatible fields (both config sources, or a one-shot run with no prompt or input), or the config override is invalid. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -9911,7 +10725,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The named agent or template does not exist in your account. */
+            /** @description The named agent does not exist in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -10705,6 +11519,15 @@ type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
  * Where the resolved budget came from.
  */
 type BudgetSource = 'system' | 'account' | 'config' | 'run';
+/**
+ * How a session's environment was chosen. None (the field is nullable)
+ * when the config carried an inline environment block and no resolution ran —
+ * an inline environment is not a reference, so there is nothing to record.
+ *
+ * Not derivable from the row: `environment_id` says WHICH environment, not
+ * how it was chosen, and is null for the built-in basic sandbox.
+ */
+type EnvironmentSource = 'request' | 'agent_config' | 'repo_default' | 'account_default' | 'platform_default';
 /**
  * Why a terminal agent session ended — a finer-grained reason than `status`.
  *
@@ -10840,10 +11663,15 @@ interface Session {
      * When the session was created.
      */
     created_at: string;
+    environment: SessionEnvironment;
     /**
      * How the session ended; null until it is terminal.
      */
     exit_status: SessionExitStatus | null;
+    /**
+     * What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured.
+     */
+    git: SessionGit | null;
     harness: Harness;
     /**
      * Unique identifier of the session.
@@ -10863,14 +11691,6 @@ interface Session {
     metadata: {
         [k: string]: string;
     };
-    /**
-     * Per-file line counts for the uncommitted changes in the session's workspace. Work the session committed is not included here — see output_prs. Null if no diff was ever captured.
-     */
-    output_diff: SessionDiff | null;
-    /**
-     * Pull requests the session created or updated.
-     */
-    output_prs: SessionPr[] | null;
     parent: SessionParent;
     /**
      * The per-session prompt the session was started with.
@@ -10927,9 +11747,8 @@ interface AgentConfig {
     claude: AgentConfigClaude;
     codex: AgentConfigCodex | null;
     ellipsis: AgentConfigEllipsis;
-    environment: AgentConfigEnvironment;
+    environment: string | AgentConfigEnvironment;
     input: AgentConfigInput | null;
-    mcp_servers: (string | AgentConfigMcpServer)[];
     output: AgentConfigOutput | null;
     permissions: AgentConfigPermissions;
     skills: AgentConfigSkill[];
@@ -10990,22 +11809,19 @@ interface AgentConfigCodex {
 /**
  * The Ellipsis product namespace for a config file: which schema this is
  * (`version`), the human-facing identity (`name`/`description`), freeform
- * organizational `metadata`, whether the agent is `enabled`, and the
- * human-access flag `interactive`. The presence of a top-level `ellipsis:`
- * mapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary
- * YAML that merely lives under a config directory) — see
- * `yaml_is_ellipsis_config`.
+ * organizational `metadata`, and whether the agent is `enabled`. The
+ * presence of a top-level `ellipsis:` mapping is what marks a YAML file as
+ * an Ellipsis agent config (vs arbitrary YAML that merely lives under a
+ * config directory) — see `yaml_is_ellipsis_config`.
  *
- * `enabled`/`interactive` are agent behavior, not freeform metadata, so they
- * stay inside the config `sha` (only `metadata` is sha-excluded).
- * `interactive` lets a human `agent session connect` to a live session (CLI
- * relay). It does not decide whether a session is ephemeral or durable — that
- * is the trigger's job.
+ * `enabled` is agent behavior, not freeform metadata, so it stays inside
+ * the config `sha` (only `metadata` is sha-excluded). Whether a session
+ * accepts messages is a per-run choice (POST /v1/sessions `interactive`),
+ * not a config one.
  */
 interface AgentConfigEllipsis {
     description: string | null;
     enabled: boolean;
-    interactive: boolean;
     metadata: AgentConfigMetadata;
     name: string | null;
     version: string;
@@ -11033,6 +11849,7 @@ interface AgentConfigEnvironment {
     compute: AgentConfigCompute;
     hooks: AgentConfigEnvironmentHooks;
     image: AgentConfigEnvironmentImage;
+    mcp_servers: (string | AgentConfigMcpServer | AgentConfigMcpStdioServer | AgentConfigMcpRemoteServer)[];
     repositories: AgentConfigRepository[];
     variables: AgentConfigEnvironmentVariable[];
 }
@@ -11123,6 +11940,49 @@ interface AgentConfigEnvironmentImage {
     dockerfile_append: string | null;
     setup: string | null;
 }
+/**
+ * One built-in MCP server this agent opts into by name (`linear`/`slack`).
+ * A name reference over the connected built-in set — the platform manages the
+ * server's transport and credentials. It only matters when the named
+ * integration is set to `opt_in` inclusion; an integration in the default
+ * `all_sessions` mode is added regardless. For a server the platform does not
+ * provide, define it instead (`AgentConfigMcpStdioServer` /
+ * `AgentConfigMcpRemoteServer`).
+ */
+interface AgentConfigMcpServer {
+    name: string;
+}
+/**
+ * A bring-your-own stdio MCP server: the harness spawns `command` inside
+ * the sandbox and speaks JSON-RPC over its stdin/stdout. The command must be
+ * runnable in the sandbox image — install its runtime via `image.setup` /
+ * `image.dockerfile_append` if the base image lacks it.
+ *
+ * `env` values may embed `${NAME}` references, resolved at run time from the
+ * account's secrets store (see `mcp_secret_refs`); everything else is passed
+ * literally.
+ */
+interface AgentConfigMcpStdioServer {
+    args: string[];
+    command: string;
+    env: {
+        [k: string]: string;
+    };
+    name: string;
+}
+/**
+ * A bring-your-own remote MCP server: the harness talks HTTP to `url`.
+ * Nothing runs in the sandbox image. `headers` carry static auth (e.g.
+ * `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
+ * references, resolved at run time from the account's secrets store.
+ */
+interface AgentConfigMcpRemoteServer {
+    headers: {
+        [k: string]: string;
+    };
+    name: string;
+    url: string;
+}
 /**
  * One environment variable injected into the agent's sandbox.
  *
@@ -11158,17 +12018,6 @@ interface AgentConfigInput {
     } | null;
     message: string | null;
 }
-/**
- * One built-in MCP server this agent opts into by name (`linear`/`slack`).
- * This is a name reference over the connected built-in set, NOT a custom-server
- * definition — there is no command/url/headers shape (that was the old,
- * removed field, and Ellipsis does not support bring-your-own MCP servers).
- * It only matters when the named integration is set to `opt_in` inclusion; an
- * integration in the default `all_sessions` mode is added regardless.
- */
-interface AgentConfigMcpServer {
-    name: string;
-}
 /**
  * The typed output contract: the JSON Schema the agent must exit through
  * (the StructuredOutput exit tool). Read back via
@@ -11380,38 +12229,56 @@ interface SessionCost {
     total: number;
 }
 /**
- * The counts half of a session's working-tree diff, small enough to ride on
- * agent_sessions and be returned by every session read. The patch text lives
- * in `agent_session_diffs` and is fetched on demand.
- *
- * Scope is UNCOMMITTED work only (`git diff HEAD`), so this answers "is there
- * unlanded work in this sandbox?" — a session that committed and pushed shows
- * no files here and its created PR instead.
+ * The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment.
  */
-interface SessionDiff {
-    files: SessionDiffFile[];
+interface SessionEnvironment {
+    /**
+     * Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.
+     */
+    environment_id: string | null;
+    /**
+     * How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment.
+     */
+    source: EnvironmentSource | null;
+}
+/**
+ * Every repo the session touched. Small enough to ride on `agent_sessions`
+ * and be returned by every session read.
+ */
+interface SessionGit {
+    repos: SessionGitRepo[];
+}
+/**
+ * One checkout in the session's sandbox and everything the session did to
+ * it, split by whether it survived the sandbox.
+ */
+interface SessionGitRepo {
+    full_name: string;
+    local_commit: string | null;
+    local_uncommitted_files: SessionGitFile[];
+    prs: SessionGitPr[];
+    remote_branch: string | null;
+    remote_commit: string | null;
 }
 /**
- * One file's uncommitted change in a session's sandbox, as `git diff HEAD`
- * --numstat reports it (with intent-to-add so new files count).
+ * One file's uncommitted change, as `git diff HEAD --numstat` reports it
+ * (with intent-to-add, so a brand-new file still counts).
  */
-interface SessionDiffFile {
+interface SessionGitFile {
     additions: number;
     deletions: number;
     path: string;
-    repo: string;
     status: string;
 }
 /**
- * A pull request this session created, denormalized at capture time so
- * session surfaces render a labeled link without joining gh_prs. Live PR
- * state (open/merged/closed) is not stored here — read it from gh_prs where
- * a view needs it.
+ * A pull request the session opened in this repo, denormalized at capture
+ * time so a surface renders a labeled link without joining gh_prs. Live PR
+ * state (open/merged/closed) is not stored — read gh_prs where a view needs
+ * it. The repo is the parent object, so it is not repeated here.
  */
-interface SessionPr {
+interface SessionGitPr {
     gh_pr_id: number | null;
     number: number;
-    repo_full_name: string;
     url: string;
 }
 /**
@@ -12024,10 +12891,15 @@ interface Session1 {
      * When the session was created.
      */
     created_at: string;
+    environment: SessionEnvironment;
     /**
      * How the session ended; null until it is terminal.
      */
     exit_status: SessionExitStatus | null;
+    /**
+     * What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured.
+     */
+    git: SessionGit | null;
     harness: Harness;
     /**
      * Unique identifier of the session.
@@ -12047,14 +12919,6 @@ interface Session1 {
     metadata: {
         [k: string]: string;
     };
-    /**
-     * Per-file line counts for the uncommitted changes in the session's workspace. Work the session committed is not included here — see output_prs. Null if no diff was ever captured.
-     */
-    output_diff: SessionDiff | null;
-    /**
-     * Pull requests the session created or updated.
-     */
-    output_prs: SessionPr[] | null;
     parent: SessionParent;
     /**
      * The per-session prompt the session was started with.
@@ -12187,4 +13051,4 @@ type ReviewRequester = components['schemas']['ReviewRequester'];
 type ReviewFinding = components['schemas']['ReviewFinding'];
 type Finding = ReviewFinding;
 
-export type { SessionResponse as $, AgentConfigSource as A, BudgetSource as B, ClaudeSessionRecord as C, DeltaFrame as D, ErrorFrame as E, Finding as F, GithubAccountSnippet as G, Harness as H, SdkUserRecord as I, SendSessionMessageRequest as J, Session as K, LifecycleSessionRecord as L, SessionExecution as M, SessionExecutionsListResponse as N, SessionExitStatus as O, ParentKind as P, SessionFrame as Q, RecordsAppendFrame as R, SdkAssistantRecord as S, SessionLiveness as T, SessionMessage as U, SessionMessageResponse as V, SessionMessageStatus as W, SessionPr as X, SessionPrompting as Y, SessionRecord as Z, SessionRecordsListResponse as _, AttributionType as a, SessionSource as a0, SessionState as a1, SessionStatus as a2, SessionStreamFrame as a3, SessionSurface as a4, SessionsListResponse as a5, SnapshotFrame as a6, StreamFrame as a7, TokensInfo as a8, paths as a9, CodexFileChangeItem as aa, CodexMcpToolCallItem as ab, CodexEvent as b, components as c, CodexItem as d, CodexSessionRecord as e, CreateReviewRequest as f, DoneFrame as g, GithubAccountType as h, HeartbeatFrame as i, PromptBlockedReason as j, ResolvedReviewScope as k, Review as l, ReviewConfiguration as m, ReviewCounters as n, ReviewFinding as o, ReviewRequester as p, ReviewScope as q, ReviewScopeKind as r, ReviewStage as s, ReviewedCommit as t, ReviewsListResponse as u, SdkContentBlock as v, SdkRateLimitRecord as w, SdkRecord as x, SdkResultRecord as y, SdkSystemRecord as z };
+export type { SessionResponse as $, AgentConfigSource as A, BudgetSource as B, ClaudeSessionRecord as C, DeltaFrame as D, ErrorFrame as E, Finding as F, GithubAccountSnippet as G, Harness as H, SdkUserRecord as I, SendSessionMessageRequest as J, Session as K, LifecycleSessionRecord as L, SessionExecution as M, SessionExecutionsListResponse as N, SessionExitStatus as O, ParentKind as P, SessionFrame as Q, RecordsAppendFrame as R, SdkAssistantRecord as S, SessionGit as T, SessionLiveness as U, SessionMessage as V, SessionMessageResponse as W, SessionMessageStatus as X, SessionPrompting as Y, SessionRecord as Z, SessionRecordsListResponse as _, AttributionType as a, SessionSource as a0, SessionState as a1, SessionStatus as a2, SessionStreamFrame as a3, SessionSurface as a4, SessionsListResponse as a5, SnapshotFrame as a6, StreamFrame as a7, TokensInfo as a8, paths as a9, CodexFileChangeItem as aa, CodexMcpToolCallItem as ab, CodexEvent as b, components as c, CodexItem as d, CodexSessionRecord as e, CreateReviewRequest as f, DoneFrame as g, GithubAccountType as h, HeartbeatFrame as i, PromptBlockedReason as j, ResolvedReviewScope as k, Review as l, ReviewConfiguration as m, ReviewCounters as n, ReviewFinding as o, ReviewRequester as p, ReviewScope as q, ReviewScopeKind as r, ReviewStage as s, ReviewedCommit as t, ReviewsListResponse as u, SdkContentBlock as v, SdkRateLimitRecord as w, SdkRecord as x, SdkResultRecord as y, SdkSystemRecord as z };